Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/7X9b0xMuITec9OHlXFXhUoX1nhs.roa
File: 7X9b0xMuITec9OHlXFXhUoX1nhs.roa (raw, json)
Hash identifier: vwIQX7lSj+m1XDGpEygLhPARGVuACezHce+HzYvPiB8=
Subject key identifier: ED:7F:5B:D3:13:2E:21:37:9C:F4:E1:E5:5C:55:E1:52:85:F5:9E:1B
Certificate issuer: /CN=c933481d3fa48710dcb973fdcd29340dedb6229a
Certificate serial: 018570DE44EBCCACC7D56E2302AFA7E35745
Authority key identifier: C9:33:48:1D:3F:A4:87:10:DC:B9:73:FD:CD:29:34:0D:ED:B6:22:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yTNIHT-khxDcuXP9zSk0De22Ipo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/7X9b0xMuITec9OHlXFXhUoX1nhs.roa
Signing time: Mon 02 Jan 2023 05:04:52 +0000
ROA not before: Mon 02 Jan 2023 05:04:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43578
IP address blocks: 5.226.168.0/24 maxlen: 24
5.226.172.0/24 maxlen: 24
2a04:b880:5::/48 maxlen: 48
2a04:b880::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:de:44:eb:cc:ac:c7:d5:6e:23:02:af:a7:e3:57:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c933481d3fa48710dcb973fdcd29340dedb6229a
Validity
Not Before: Jan 2 05:04:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ed7f5bd3132e21379cf4e1e55c55e15285f59e1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:83:48:62:5e:3f:81:8d:13:0c:da:0e:be:74:
65:45:d0:df:55:fc:1e:59:4c:cd:00:9f:8d:3e:7d:
a8:fa:a4:6f:64:82:1a:52:97:e7:4a:ff:bb:7d:86:
17:ba:91:f3:7c:be:8e:53:33:30:f0:39:52:80:f3:
26:d5:69:1d:3f:4b:65:e7:f6:7f:03:98:35:90:4a:
34:3f:de:24:b8:da:89:a4:01:6d:7b:6f:c5:b7:d5:
4a:15:e2:23:9c:0e:ef:34:d9:bb:f7:f7:60:7c:2e:
fb:07:5f:92:ea:ac:83:5c:27:ae:fd:a4:45:a3:83:
b4:51:83:f7:71:90:75:12:ad:6e:4a:8b:b7:d7:91:
0e:8c:bc:9e:47:5c:f8:72:1d:c7:df:23:07:a9:ef:
1d:06:73:66:88:40:36:5c:20:31:b8:65:80:9f:80:
2b:15:77:87:6c:6b:b1:da:53:0a:e9:54:43:e1:ea:
1e:5c:53:20:51:d2:d5:34:68:8c:7f:4d:58:73:3f:
e3:bb:b4:6b:10:1d:79:16:84:34:e7:4a:a2:cf:20:
54:1e:11:8f:fb:a7:99:4a:7a:86:8f:06:ce:72:98:
1b:f3:3d:c1:37:08:84:96:bf:9b:54:db:39:f8:9e:
80:58:a5:ac:38:42:5c:27:9b:c8:e2:25:a7:3a:d7:
2a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:7F:5B:D3:13:2E:21:37:9C:F4:E1:E5:5C:55:E1:52:85:F5:9E:1B
X509v3 Authority Key Identifier:
keyid:C9:33:48:1D:3F:A4:87:10:DC:B9:73:FD:CD:29:34:0D:ED:B6:22:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yTNIHT-khxDcuXP9zSk0De22Ipo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/7X9b0xMuITec9OHlXFXhUoX1nhs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.226.168.0/24
5.226.172.0/24
IPv6:
2a04:b880::/48
2a04:b880:5::/48
Signature Algorithm: sha256WithRSAEncryption
87:2a:d2:7e:ba:63:f7:f8:b4:14:b9:ac:09:9a:7b:86:f7:ce:
61:83:64:8e:ac:47:48:0f:c1:19:d3:15:3d:06:a8:39:ca:ea:
55:7b:3a:ca:19:8d:ba:12:73:24:4c:4b:86:b8:f2:1b:be:6d:
4d:45:40:8b:2d:0d:a4:91:95:9e:36:35:7f:b7:8c:ed:70:c6:
8b:05:13:b1:66:bd:30:96:2b:7e:9c:3a:b0:54:33:bb:52:10:
fe:64:40:a3:dd:04:e7:be:c9:c6:72:39:b1:4c:39:f1:f0:5a:
d8:f7:c4:ee:3e:6f:92:b1:5a:08:19:32:50:8e:e7:1c:21:b5:
58:c2:65:bd:71:86:c2:a6:e6:df:85:95:cb:05:1f:ae:11:c5:
4f:7a:68:99:68:43:f4:d1:46:2d:d3:2c:20:a6:b1:da:61:d3:
a4:b8:d9:c0:22:ba:53:95:e4:de:22:30:17:58:88:2b:54:e4:
4b:9a:94:5e:b8:07:61:d3:5e:6e:57:88:12:d6:01:da:17:fb:
c4:d2:2f:4d:38:5c:39:06:5c:43:65:ee:5d:51:18:a4:ed:e4:
03:9a:83:07:5b:f4:3b:2b:15:9a:6b:d2:e7:c7:2b:b4:18:5a:
ed:1e:05:9b:bf:04:28:51:1a:6e:92:e8:51:f2:fa:b9:95:90:
97:75:3e:b8
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAYVw3kTrzKzH1W4jAq+n41dFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5MzM0ODFkM2ZhNDg3MTBkY2I5NzNmZGNkMjkzNDBkZWRi
NjIyOWEwHhcNMjMwMTAyMDUwNDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZDdmNWJkMzEzMmUyMTM3OWNmNGUxZTU1YzU1ZTE1Mjg1ZjU5ZTFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmoNIYl4/gY0TDNoOvnRlRdDfVfwe
WUzNAJ+NPn2o+qRvZIIaUpfnSv+7fYYXupHzfL6OUzMw8DlSgPMm1WkdP0tl5/Z/
A5g1kEo0P94kuNqJpAFte2/Ft9VKFeIjnA7vNNm79/dgfC77B1+S6qyDXCeu/aRF
o4O0UYP3cZB1Eq1uSou315EOjLyeR1z4ch3H3yMHqe8dBnNmiEA2XCAxuGWAn4Ar
FXeHbGux2lMK6VRD4eoeXFMgUdLVNGiMf01Ycz/ju7RrEB15FoQ050qizyBUHhGP
+6eZSnqGjwbOcpgb8z3BNwiElr+bVNs5+J6AWKWsOEJcJ5vI4iWnOtcq4QIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFO1/W9MTLiE3nPTh5VxV4VKF9Z4bMB8GA1UdIwQY
MBaAFMkzSB0/pIcQ3Llz/c0pNA3ttiKaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVROSUhULWtoeERjdVhQOXpTazBEZTIySXBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS83MzI4MDEtNjI5NC00MTJiLTk1NWUt
ZmVmZDM3NjY2NzQxLzEvN1g5YjB4TXVJVGVjOU9IbFhGWGhVb1gxbmhzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS83MzI4MDEtNjI5NC00MTJiLTk1NWUtZmVmZDM3NjY2NzQx
LzEveVROSUhULWtoeERjdVhQOXpTazBEZTIySXBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjASBAIAATAMAwQABeKoAwQA
BeKsMBgEAgACMBIDBwAqBLiAAAADBwAqBLiAAAUwDQYJKoZIhvcNAQELBQADggEB
AIcq0n66Y/f4tBS5rAmae4b3zmGDZI6sR0gPwRnTFT0GqDnK6lV7OsoZjboScyRM
S4a48hu+bU1FQIstDaSRlZ42NX+3jO1wxosFE7FmvTCWK36cOrBUM7tSEP5kQKPd
BOe+ycZyObFMOfHwWtj3xO4+b5KxWggZMlCO5xwhtVjCZb1xhsKm5t+FlcsFH64R
xU96aJloQ/TRRi3TLCCmsdph06S42cAiulOV5N4iMBdYiCtU5EualF64B2HTXm5X
iBLWAdoX+8TSL004XDkGXENl7l1RGKTt5AOagwdb9DsrFZpr0ufHK7QYWu0eBZu/
BChRGm6S6FHy+rmVkJd1Prg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:25 2024 by rpki-client on console-fra.rpki-client.org